--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) --- {"level":"info","ts":"2026-07-07T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97808123715f116d7b1531ad1470b85012987afcabfa59719ce96c0c7215f697"} {"level":"info","ts":"2026-07-07T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4169dca4efa644bb7ab654cb4bf9cb4c93d43725c25d9b07698f763f833c33fb"} {"level":"info","ts":"2026-07-07T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/903133e7db951972c61a67dac9179cd91bae8a5e261fff9aaf9cceef0bf3c775"} {"level":"info","ts":"2026-07-07T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f8ee561ceca97235893e38d48cda6c615bc3e301a0565731fb2a3b573ec37f0"} {"level":"info","ts":"2026-07-07T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3903158d92ecc5f5ea9f576b03cb6374601e9d4346f94925c49b8cbf7cbb013c"} {"level":"info","ts":"2026-07-07T15:33:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a25ac4dfec6ee8962acceb371a0c0c1e9fdbb43c589b09c85096b7f35181a2b5"} {"level":"info","ts":"2026-07-07T15:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3d54271744e1b34056c5269f284c0eb05e4824d40dad087fc362c9dc0f113cc"} {"level":"info","ts":"2026-07-07T15:34:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3671b1bce6b35c85231af5428e97abf14a855fa7d9c7c7d633db558987b3cf9"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"} {"level":"error","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"error","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"debug","ts":"2026-07-07T15:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9"} {"level":"debug","ts":"2026-07-07T15:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9"} {"level":"debug","ts":"2026-07-07T15:34:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"error","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:34:34Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:34:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"info","ts":"2026-07-07T15:34:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ee2f7633c57829f3937b8a59f4122027699759241e75f79eb5bb251c81e9476"} {"level":"info","ts":"2026-07-07T15:34:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57d074d2a2f0c59d50491e9733e65f0a6354bd87f1933cfb552d3f46357669dc"} {"level":"info","ts":"2026-07-07T15:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa056afc29f4e61919a75c2e8c3ad801d3e1e1722ff32916f12767eef806d7b9"} {"level":"info","ts":"2026-07-07T15:34:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/28ebda5fefe8ca213974fc26cc20e2a4c9e9228c11aef9ea9e65cf3beda45670"} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"error","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c"} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c"} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c"} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760"} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760"} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760"} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:39Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"info","ts":"2026-07-07T15:36:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"debug","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:36:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5"} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5"} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5"} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37"} {"level":"error","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"error","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324"} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:36:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:36:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:36:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"info","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47210","PortSpecifier":{"PortValue":47210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47210","PortSpecifier":{"PortValue":47210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438609,"nanos":513938612},"http":{"id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1447101a-f17b-43a7-a9e5-3f1bcbc15d97","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:59964","PortSpecifier":{"PortValue":59964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:59964","PortSpecifier":{"PortValue":59964}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438609,"nanos":576874763},"http":{"id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03d3c6a1-9be6-4f79-8b37-c8715f179729","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47212","PortSpecifier":{"PortValue":47212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a00038f3-54af-41ae-be9c-706d6b0e1131","method":"GET","path":"/maas-api/v1/api-keys/0e56bd6d-6cab-40cc-ad68-6988aec81054","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47212","PortSpecifier":{"PortValue":47212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438609,"nanos":668745683},"http":{"id":"a00038f3-54af-41ae-be9c-706d6b0e1131","method":"GET","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0e56bd6d-6cab-40cc-ad68-6988aec81054",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0e56bd6d-6cab-40cc-ad68-6988aec81054",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a00038f3-54af-41ae-be9c-706d6b0e1131","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cd9878b-f302-4179-9079-33d3ae718200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:59972","PortSpecifier":{"PortValue":59972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cd9878b-f302-4179-9079-33d3ae718200","method":"GET","path":"/maas-api/v1/api-keys/a9b893e7-201b-457c-b993-9f84e30039bf","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cd9878b-f302-4179-9079-33d3ae718200","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:59972","PortSpecifier":{"PortValue":59972}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438609,"nanos":714112972},"http":{"id":"8cd9878b-f302-4179-9079-33d3ae718200","method":"GET","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a9b893e7-201b-457c-b993-9f84e30039bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8cd9878b-f302-4179-9079-33d3ae718200","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cd9878b-f302-4179-9079-33d3ae718200","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cd9878b-f302-4179-9079-33d3ae718200","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a9b893e7-201b-457c-b993-9f84e30039bf",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cd9878b-f302-4179-9079-33d3ae718200","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cd9878b-f302-4179-9079-33d3ae718200","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cd9878b-f302-4179-9079-33d3ae718200","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8cd9878b-f302-4179-9079-33d3ae718200","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cd9878b-f302-4179-9079-33d3ae718200","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cd9878b-f302-4179-9079-33d3ae718200","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cd9878b-f302-4179-9079-33d3ae718200","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:36:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cd9878b-f302-4179-9079-33d3ae718200","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47604","PortSpecifier":{"PortValue":47604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47604","PortSpecifier":{"PortValue":47604}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438626,"nanos":993622633},"http":{"id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aab0203d-2a0f-4e8f-99dd-f5e919c0097e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:59100","PortSpecifier":{"PortValue":59100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:59100","PortSpecifier":{"PortValue":59100}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438627,"nanos":35453269},"http":{"id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dcf7d597-c52b-4003-9dd0-fc91cab53703","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"123fd344-db2b-4aee-97e0-94db4c830145","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47606","PortSpecifier":{"PortValue":47606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"123fd344-db2b-4aee-97e0-94db4c830145","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"123fd344-db2b-4aee-97e0-94db4c830145","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47606","PortSpecifier":{"PortValue":47606}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438627,"nanos":78424230},"http":{"id":"123fd344-db2b-4aee-97e0-94db4c830145","method":"GET","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-7UAjkeMfdOMFm4oF_7fwSYgDlH0Fabzud1bnhZZ6JKWq7oafEdmAOoB27nXO"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-7UAjkeMfdOMFm4oF_7fwSYgDlH0Fabzud1bnhZZ6JKWq7oafEdmAOoB27nXO\"}"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6a5fc184-8995-4394-9cf6-0c9713ec08e5","keyName":"e2e-auth-iso-a-e66514","subscription":"e2e-auth-iso-365908","tenant":"e2e-shared-a-8f5391","userId":"6a5fc184-8995-4394-9cf6-0c9713ec08e5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"123fd344-db2b-4aee-97e0-94db4c830145","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-365908"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"123fd344-db2b-4aee-97e0-94db4c830145","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"123fd344-db2b-4aee-97e0-94db4c830145","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"123fd344-db2b-4aee-97e0-94db4c830145","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48418","PortSpecifier":{"PortValue":48418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48418","PortSpecifier":{"PortValue":48418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438642,"nanos":323668944},"http":{"id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"95676f02-0b0c-4223-a704-0fa18c5e1d33","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:50980","PortSpecifier":{"PortValue":50980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:50980","PortSpecifier":{"PortValue":50980}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438642,"nanos":359526285},"http":{"id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d78d100a-5d61-4088-9fa3-7338e544f2d1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:50994","PortSpecifier":{"PortValue":50994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:50994","PortSpecifier":{"PortValue":50994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438642,"nanos":398813010},"http":{"id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","method":"GET","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uONJWF3V5oOHwSuT_gpOnkeP1jPwGecYpUgl3qKYD4VAzD1Z2M0JW0ir8Hcl"} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uONJWF3V5oOHwSuT_gpOnkeP1jPwGecYpUgl3qKYD4VAzD1Z2M0JW0ir8Hcl\"}"} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"} {"level":"info","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}} {"level":"debug","ts":"2026-07-07T15:37:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0faba839-c2b1-47c3-95ea-d7ca002d2e32","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}} {"level":"info","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48522","PortSpecifier":{"PortValue":48522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48522","PortSpecifier":{"PortValue":48522}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438657,"nanos":536133120},"http":{"id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbbeb60e-f61f-4fc7-8769-44cd7d2778aa","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54262","PortSpecifier":{"PortValue":54262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54262","PortSpecifier":{"PortValue":54262}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438657,"nanos":568671532},"http":{"id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1f1b4b6-54d5-4e40-9d70-a3616d9bee08","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48536","PortSpecifier":{"PortValue":48536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:48536","PortSpecifier":{"PortValue":48536}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438657,"nanos":610727113},"http":{"id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"608e626a-c5d0-4a11-87c0-34d32d3f9095","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54274","PortSpecifier":{"PortValue":54274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:54274","PortSpecifier":{"PortValue":54274}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438657,"nanos":649418763},"http":{"id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e71455cc-d46b-4b79-9152-b0dde61fc7ca","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38994","PortSpecifier":{"PortValue":38994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38994","PortSpecifier":{"PortValue":38994}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438672,"nanos":784256444},"http":{"id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06a6dfc3-cce6-4eab-9bae-916e8da4dd0c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34220","PortSpecifier":{"PortValue":34220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34220","PortSpecifier":{"PortValue":34220}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438672,"nanos":819768738},"http":{"id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ed2eaa8f-4e01-4d7b-874a-ea7d5a2cdf38","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34236","PortSpecifier":{"PortValue":34236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","method":"GET","path":"/maas-api/v1/api-keys/a7162189-71fe-490c-ab65-8c91820e8307","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34236","PortSpecifier":{"PortValue":34236}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438672,"nanos":860888724},"http":{"id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","method":"GET","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7162189-71fe-490c-ab65-8c91820e8307",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7162189-71fe-490c-ab65-8c91820e8307",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0241be16-4bda-461d-a4d0-69fd6dcff24a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33495853-9971-4c69-9f33-550a381bf85e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39000","PortSpecifier":{"PortValue":39000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"33495853-9971-4c69-9f33-550a381bf85e","method":"GET","path":"/maas-api/v1/api-keys/a7162189-71fe-490c-ab65-8c91820e8307","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"33495853-9971-4c69-9f33-550a381bf85e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:39000","PortSpecifier":{"PortValue":39000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438672,"nanos":899155414},"http":{"id":"33495853-9971-4c69-9f33-550a381bf85e","method":"GET","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7162189-71fe-490c-ab65-8c91820e8307",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"33495853-9971-4c69-9f33-550a381bf85e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"33495853-9971-4c69-9f33-550a381bf85e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"33495853-9971-4c69-9f33-550a381bf85e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a7162189-71fe-490c-ab65-8c91820e8307",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33495853-9971-4c69-9f33-550a381bf85e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33495853-9971-4c69-9f33-550a381bf85e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"33495853-9971-4c69-9f33-550a381bf85e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"33495853-9971-4c69-9f33-550a381bf85e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33495853-9971-4c69-9f33-550a381bf85e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"33495853-9971-4c69-9f33-550a381bf85e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33495853-9971-4c69-9f33-550a381bf85e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:37:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"33495853-9971-4c69-9f33-550a381bf85e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40434","PortSpecifier":{"PortValue":40434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"310760e0-4c35-433b-a977-2f7bf887bb40","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40434","PortSpecifier":{"PortValue":40434}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438690,"nanos":204347667},"http":{"id":"310760e0-4c35-433b-a977-2f7bf887bb40","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"310760e0-4c35-433b-a977-2f7bf887bb40","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe743611-b21a-4f66-b153-c0925081695e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40342","PortSpecifier":{"PortValue":40342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fe743611-b21a-4f66-b153-c0925081695e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fe743611-b21a-4f66-b153-c0925081695e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40342","PortSpecifier":{"PortValue":40342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438690,"nanos":239607892},"http":{"id":"fe743611-b21a-4f66-b153-c0925081695e","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fe743611-b21a-4f66-b153-c0925081695e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fe743611-b21a-4f66-b153-c0925081695e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fe743611-b21a-4f66-b153-c0925081695e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe743611-b21a-4f66-b153-c0925081695e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe743611-b21a-4f66-b153-c0925081695e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fe743611-b21a-4f66-b153-c0925081695e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/auth-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fe743611-b21a-4f66-b153-c0925081695e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe743611-b21a-4f66-b153-c0925081695e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fe743611-b21a-4f66-b153-c0925081695e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe743611-b21a-4f66-b153-c0925081695e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fe743611-b21a-4f66-b153-c0925081695e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40444","PortSpecifier":{"PortValue":40444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d68af7b-70b2-4cc0-b122-945742249a84","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:40444","PortSpecifier":{"PortValue":40444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438690,"nanos":277215141},"http":{"id":"1d68af7b-70b2-4cc0-b122-945742249a84","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-B3uweQG9NauLQY5o_6ehI3d47bGHayoXsPTDat5jsJBHV4nwdj0uwkxiOqcM"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-B3uweQG9NauLQY5o_6ehI3d47bGHayoXsPTDat5jsJBHV4nwdj0uwkxiOqcM\"}"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d113f0a1-53e0-4b7c-8086-6cd870f16fcb","keyName":"e2e-auth-iso-a-ad29eb","subscription":"e2e-auth-iso-3bce0e","tenant":"e2e-shared-a-8f5391","userId":"d113f0a1-53e0-4b7c-8086-6cd870f16fcb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/auth-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3bce0e"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:38:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d68af7b-70b2-4cc0-b122-945742249a84","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:38:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9523bbaaf60888d29bee9ed89a6b0531e9d26d835e9f4f7e15c5bd4de5df084c"} {"level":"info","ts":"2026-07-07T15:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f96b2c79de2cc432f55b92786677d4665b1501a46a82f84910aa9383d68f47fd"} {"level":"info","ts":"2026-07-07T15:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6b49104bafe283b96894da743c64cc384cb0cee34de4871d322ab743915c4ff8"} {"level":"info","ts":"2026-07-07T15:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba32a737550091588988b7c6641c62cadd053bd1a06df804fc08e87a4e8157f0"} {"level":"info","ts":"2026-07-07T15:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/67c37044a809ac92d47ce2fc271d1de59b449636c499e6198fe8e207463c7263"} {"level":"info","ts":"2026-07-07T15:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/92ff7c199516cdcea74cae3c56f6f797685d4e06ceb3126b17720ea103c3c80c"} {"level":"info","ts":"2026-07-07T15:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8eadcca9f44f46b12c7e3cd5a92f6c7462a694bea95cbeb744180ed574fcb760"} {"level":"info","ts":"2026-07-07T15:38:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f37efe8b5d7d1ed6fea8115c5879fb98b841c4f135126c62abcff669a282e34c"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"} {"level":"info","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c2a2142b9d57cad15df034edce1376ed0de94c473c3194f0162aab41b6d52de7"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d29e9392c9aba31854923b7023d06378433ac548dd14a1cb6eb66c5e5a8435f3"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e98fc2cfdfe1a3179cb64d122be954acfab3a92372a08f758bcd1247f305643"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6047900a262f009f1462ed2a909e4457c341421ed1db8618640eff19f7b63cc5"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a9b2828f06f36e10491f67d6a4844691e00f96277835b8b731ea61584b0d5b1"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ea19e6f20df2e12afa2bc5f6de46f73d93565b25a6f6eeabe8a40c4e944ab24"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/818cc300599dcf0a8c9c99f079057d2f9b172553edc6804d49a6c59cdfe22f37"} {"level":"info","ts":"2026-07-07T15:38:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8d65effc7b71a8735cbea6535521c800c527a7860f1cf1d9d258bc38ebc4f324"} {"level":"debug","ts":"2026-07-07T15:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504"} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a"} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"} {"level":"debug","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"} {"level":"info","ts":"2026-07-07T15:38:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba"} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:38:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:38:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:38:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:38:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:38:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a"} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:39:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"} {"level":"error","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"error","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba"} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"} {"level":"debug","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"info","ts":"2026-07-07T15:39:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504"} {"level":"info","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34584","PortSpecifier":{"PortValue":34584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"34cf566f-6f0e-4acb-9fef-723183d142d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34584","PortSpecifier":{"PortValue":34584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438743,"nanos":982520359},"http":{"id":"34cf566f-6f0e-4acb-9fef-723183d142d7","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/sub-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:39:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"34cf566f-6f0e-4acb-9fef-723183d142d7","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38324","PortSpecifier":{"PortValue":38324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"90c000b4-fd14-4834-8cea-353300fcc8c8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38324","PortSpecifier":{"PortValue":38324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438744,"nanos":24482506},"http":{"id":"90c000b4-fd14-4834-8cea-353300fcc8c8","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/sub-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"90c000b4-fd14-4834-8cea-353300fcc8c8","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"424bf970-400a-481d-af0c-6b09917d198e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34588","PortSpecifier":{"PortValue":34588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"424bf970-400a-481d-af0c-6b09917d198e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"424bf970-400a-481d-af0c-6b09917d198e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34588","PortSpecifier":{"PortValue":34588}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438744,"nanos":67555342},"http":{"id":"424bf970-400a-481d-af0c-6b09917d198e","method":"GET","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AqzavWMd1IxAC0zv_9yzQZNy2FYNpJnWKmWMOQTE1ET6KLU59iv1gvRpZFd0"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AqzavWMd1IxAC0zv_9yzQZNy2FYNpJnWKmWMOQTE1ET6KLU59iv1gvRpZFd0\"}"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"bdc40626-56f2-4ad9-998d-d2b78bf398ad","keyName":"e2e-sub-iso-ceafe4","subscription":"e2e-a-only-c7f126","tenant":"e2e-shared-a-8f5391","userId":"bdc40626-56f2-4ad9-998d-d2b78bf398ad","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"424bf970-400a-481d-af0c-6b09917d198e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/sub-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-c7f126"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"424bf970-400a-481d-af0c-6b09917d198e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"424bf970-400a-481d-af0c-6b09917d198e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"424bf970-400a-481d-af0c-6b09917d198e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38340","PortSpecifier":{"PortValue":38340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:38340","PortSpecifier":{"PortValue":38340}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438744,"nanos":98465113},"http":{"id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","method":"GET","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1B0gM9P4qtj1bNNrQ_2XWKFc5XmYHWJRu0c2TI1QWYb4rbosVOywaolVbbBpC"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1B0gM9P4qtj1bNNrQ_2XWKFc5XmYHWJRu0c2TI1QWYb4rbosVOywaolVbbBpC\"}"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"da3394f9-3210-4b9d-b813-94f487db0621","keyName":"e2e-sub-iso-2352b6","subscription":"e2e-b-only-c7f126","tenant":"e2e-shared-b-600c1d","userId":"da3394f9-3210-4b9d-b813-94f487db0621","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/sub-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-c7f126"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"info","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:39:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36b7f623-5a2f-497b-9c26-bcb3fd1b181d","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47238","PortSpecifier":{"PortValue":47238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47238","PortSpecifier":{"PortValue":47238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438754,"nanos":404007556},"http":{"id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/sub-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66c6adba-be8e-4122-9c81-e49aba2e6afb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34476","PortSpecifier":{"PortValue":34476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34476","PortSpecifier":{"PortValue":34476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438754,"nanos":444667928},"http":{"id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/sub-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0365019-4246-46cb-b5bf-7bccaa42dcf5","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47250","PortSpecifier":{"PortValue":47250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eabdd68b-bf6e-4384-913e-5facf4eca282","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47250","PortSpecifier":{"PortValue":47250}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438754,"nanos":484348101},"http":{"id":"eabdd68b-bf6e-4384-913e-5facf4eca282","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ETR93t9fOit499q5_AcWj2YhI0zf2oZouydBRBMe0iZaLId6RGIcwkJFWHnh"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ETR93t9fOit499q5_AcWj2YhI0zf2oZouydBRBMe0iZaLId6RGIcwkJFWHnh\"}"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"dd942a99-b1b0-4735-8693-433ba082bcf5","keyName":"e2e-sub-iso-3e4493","subscription":"e2e-shared-sub-800644","tenant":"e2e-shared-a-8f5391","userId":"dd942a99-b1b0-4735-8693-433ba082bcf5","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/sub-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-800644"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eabdd68b-bf6e-4384-913e-5facf4eca282","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34490","PortSpecifier":{"PortValue":34490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0993e9b6-cf9b-4690-9398-54d55602a03b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:34490","PortSpecifier":{"PortValue":34490}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438754,"nanos":516211195},"http":{"id":"0993e9b6-cf9b-4690-9398-54d55602a03b","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-g8xU73moGCVQURTy_LYukRhTsoOJVQPgRtm02qFxB3hdwSg5oYpabNhxLcZz"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-g8xU73moGCVQURTy_LYukRhTsoOJVQPgRtm02qFxB3hdwSg5oYpabNhxLcZz\"}"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4b66c224-9684-4a15-80d7-9bdb8fc4f2e4","keyName":"e2e-sub-iso-23efd7","subscription":"e2e-shared-sub-800644","tenant":"e2e-shared-b-600c1d","userId":"4b66c224-9684-4a15-80d7-9bdb8fc4f2e4","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/sub-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-800644"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:39:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0993e9b6-cf9b-4690-9398-54d55602a03b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c47e7cf14f56199acd05878bb23e6e18765f242149d403f669434ed3b33a7c6a"} {"level":"info","ts":"2026-07-07T15:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/632d45ecc4ad9db548a81229c267fb7b44c5269462d8c3680d2ef3e69e1cc48a"} {"level":"info","ts":"2026-07-07T15:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78e8dff941e4353c208eb4b708e703ac85a21b3f00c6eb43de06c2cb59c76893"} {"level":"info","ts":"2026-07-07T15:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87e969f4404a4f9271c69e2f4bf28256219b84f8e32ea2bf5ae86f552de45a96"} {"level":"info","ts":"2026-07-07T15:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba4cee32dab90b50ac3259edae33d24dc034afff3585a20fd80fd437fb5f1b1c"} {"level":"info","ts":"2026-07-07T15:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1e881757e4b6d3fb00b84e20abf267b3b9d3a6113fdec20ced7ff5067a422627"} {"level":"info","ts":"2026-07-07T15:39:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4cbf6ab975e03c461c5b9a4110a7753558f0fc126a950e6fc3c7bb033545850e"} {"level":"info","ts":"2026-07-07T15:39:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2554d7b41e18a2496f48464dddf75cda2cb6d4a2eede54748e4a67c1c2d75430"} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"} {"level":"error","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11"} {"level":"error","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/abf3999922f59ef933296e7dca525a97d174786be7ff0c14d0fcbab16f0d2c2f"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9de51d006606e1e622a5a3f4ade1664988c07b9f0ea1a63d27d06c4d9481504"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b69e4463b4e988b7cc8ee1929a957e5b6e1f0139c7dd952acd2212ba7c9878a"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"error","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7a6bc8d1fc54fdf1a80197f6eca595d9de9f200ad6c840107d1a83b6d4599ba"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c63190240c69bc1b187d66fc1b3219cd18d079d66b701ca144b8a1dde219d501"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b1b4565e797112c351baa9b58f6ff370a308f2c9850031e3af712ba119fdda8"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/beb79e0db47b2841251d6f5f8978db4f27dfd0cb0c3900674ae1cd32f3d8a14b"} {"level":"info","ts":"2026-07-07T15:39:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0741ab78d4de1fdadd5989b91986a9d0369066f0eb70410493c7e35f5178dae9"} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"info","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:39:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:39:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"} {"level":"error","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"error","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"error","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"error","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"info","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T15:40:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T15:40:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T15:40:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2","namespace":"kuadrant-system"}} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"} {"level":"debug","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee","namespace":"kuadrant-system"}} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"} {"level":"info","ts":"2026-07-07T15:40:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"} {"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47566","PortSpecifier":{"PortValue":47566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47566","PortSpecifier":{"PortValue":47566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438820,"nanos":723679134},"http":{"id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9f6bdefe-44f1-4387-a097-0b60b47d75f1","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:52796","PortSpecifier":{"PortValue":52796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:52796","PortSpecifier":{"PortValue":52796}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438820,"nanos":795586510},"http":{"id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51f47647-1585-4855-a8e3-9d4be6d3aeab","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640813e3-41f4-443e-a647-b78ee92cf335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47570","PortSpecifier":{"PortValue":47570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"640813e3-41f4-443e-a647-b78ee92cf335","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"640813e3-41f4-443e-a647-b78ee92cf335","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47570","PortSpecifier":{"PortValue":47570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438820,"nanos":842614863},"http":{"id":"640813e3-41f4-443e-a647-b78ee92cf335","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL\"}"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","subscription":"e2e-rate-iso-a-379faf","tenant":"e2e-shared-a-8f5391","userId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-379faf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"640813e3-41f4-443e-a647-b78ee92cf335","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-379faf"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"640813e3-41f4-443e-a647-b78ee92cf335","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","selected_subscription":"e2e-rate-iso-a-379faf","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-379faf@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640813e3-41f4-443e-a647-b78ee92cf335","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"640813e3-41f4-443e-a647-b78ee92cf335","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47578","PortSpecifier":{"PortValue":47578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47578","PortSpecifier":{"PortValue":47578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438821,"nanos":908321185},"http":{"id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL"} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL\"}"} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","subscription":"e2e-rate-iso-a-379faf","tenant":"e2e-shared-a-8f5391","userId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-379faf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-379faf"} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","selected_subscription":"e2e-rate-iso-a-379faf","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-379faf@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0defe692-6fd1-4bd7-8834-e90fed0c5219","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47584","PortSpecifier":{"PortValue":47584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:47584","PortSpecifier":{"PortValue":47584}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438822,"nanos":948826373},"http":{"id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL"} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qVmaqBOvfiVd1XxR_BGUaPPEJngGG98RupJbHxyrMhCrfVK83sS253wAIQiL\"}"} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","subscription":"e2e-rate-iso-a-379faf","tenant":"e2e-shared-a-8f5391","userId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-379faf\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-379faf"} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c63a75d2-652e-45fe-a2da-01d5dfdea4ac","keyName":"e2e-rate-a-379faf","selected_subscription":"e2e-rate-iso-a-379faf","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-379faf@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-379faf","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1b9e2fa-73f1-474b-9057-0e9e3d552ebb","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44482","PortSpecifier":{"PortValue":44482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44482","PortSpecifier":{"PortValue":44482}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438833,"nanos":969029818},"http":{"id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.75:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"info","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"66af50b2-2c86-4718-b5aa-56aaab89d14b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60916","PortSpecifier":{"PortValue":60916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60916","PortSpecifier":{"PortValue":60916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438834,"nanos":12976464},"http":{"id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","tokenreview":{"name":""}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"]}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7faed89196d6"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=27701eaa-25f2-44de-871e-d7ce289ce601"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"aebcfbac-1ced-46e7-a9f3-6332247dc2be","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.76:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"info","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d2472d-2e3d-4174-b231-b2f59d08882e","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"21f2dc39-c070-408c-b543-b2a76a82676b","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44492","PortSpecifier":{"PortValue":44492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438834,"nanos":54034288},"http":{"id":"21f2dc39-c070-408c-b543-b2a76a82676b","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT\"}"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","subscription":"e2e-rate-iso-a-e76324","tenant":"e2e-shared-a-8f5391","userId":"83e052c6-76c8-4706-8789-c01d121d2fbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-e76324\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e76324"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","selected_subscription":"e2e-rate-iso-a-e76324","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-e76324@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"21f2dc39-c070-408c-b543-b2a76a82676b","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44494","PortSpecifier":{"PortValue":44494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44494","PortSpecifier":{"PortValue":44494}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438835,"nanos":94486836},"http":{"id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT"} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT\"}"} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","subscription":"e2e-rate-iso-a-e76324","tenant":"e2e-shared-a-8f5391","userId":"83e052c6-76c8-4706-8789-c01d121d2fbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-e76324\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e76324"} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","selected_subscription":"e2e-rate-iso-a-e76324","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-e76324@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"51fb7706-0c6f-42dc-bd7c-8aaaeb51759c","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44498","PortSpecifier":{"PortValue":44498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","method":"POST","path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions","host":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:44498","PortSpecifier":{"PortValue":44498}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.75:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438836,"nanos":135437980},"http":{"id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","method":"POST","headers":{":authority":"e2e-shared-a-8f5391.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GPucvVxtzIFuVDEJ_rq258vkzeTTeKQaAghLOPtRGK1eY6CKuo3emzhR9otT\"}"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","subscription":"e2e-rate-iso-a-e76324","tenant":"e2e-shared-a-8f5391","userId":"83e052c6-76c8-4706-8789-c01d121d2fbb","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\",\"requestedSubscription\":\"e2e-rate-iso-a-e76324\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-8f5391.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-e76324"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"83e052c6-76c8-4706-8789-c01d121d2fbb","keyName":"e2e-rate-a-e76324","selected_subscription":"e2e-rate-iso-a-e76324","selected_subscription_key":"ai-tenant-e2e-shared-a-8f5391/e2e-rate-iso-a-e76324@ai-tenant-e2e-shared-a-8f5391/rate-test-model-8f5391","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-8f5391","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-e76324","namespace":"ai-tenant-e2e-shared-a-8f5391","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77e1ec0a-68f5-48d3-8bb5-ad8fd43ab7a2","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60930","PortSpecifier":{"PortValue":60930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","method":"POST","path":"/ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d/v1/completions","host":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com","scheme":"https"}}}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.7:60930","PortSpecifier":{"PortValue":60930}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.76:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783438836,"nanos":174303973},"http":{"id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","method":"POST","headers":{":authority":"e2e-shared-b-600c1d.apps.bfdf555d-b782-4140-b912-7faed89196d6.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J1vNRECN0xrY473X_ATWqbkcnomTVCZohjCkjeGszqbxRIL67U8nBhJxxTR3"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J1vNRECN0xrY473X_ATWqbkcnomTVCZohjCkjeGszqbxRIL67U8nBhJxxTR3\"}"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"01d8146a-a1de-4a04-a87d-8293cde5b845","keyName":"e2e-rate-b-e76324","subscription":"e2e-rate-iso-b-e76324","tenant":"e2e-shared-b-600c1d","userId":"01d8146a-a1de-4a04-a87d-8293cde5b845","username":"system:serviceaccount:default:tester-regular-user","valid":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d\",\"requestedSubscription\":\"e2e-rate-iso-b-e76324\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-600c1d.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-600c1d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e76324","namespace":"ai-tenant-e2e-shared-b-600c1d","phase":"Active","ready":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer **** {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n object.get(input.auth.metadata, \"apiKeyValidation\", {})\n input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-e76324"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"01d8146a-a1de-4a04-a87d-8293cde5b845","keyName":"e2e-rate-b-e76324","selected_subscription":"e2e-rate-iso-b-e76324","selected_subscription_key":"ai-tenant-e2e-shared-b-600c1d/e2e-rate-iso-b-e76324@ai-tenant-e2e-shared-b-600c1d/rate-test-model-600c1d","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-600c1d","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-e76324","namespace":"ai-tenant-e2e-shared-b-600c1d","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}} {"level":"info","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","authorized":true,"response":"OK"} {"level":"debug","ts":"2026-07-07T15:40:36Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d09f6ba7-1e18-4ca9-8c07-cd43fc3b341a","authorized":true,"response":"OK"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6831a26723e75dc077047cb5b856ebbb6adbd72b1a11f2ca7abe0fa13d5a73a5"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49c4031ea3b410edcc54a2221980c1727e84fbca52771b9ac69c62861e9f7ae5"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cee37f68a6bc3bce8d06697056eda76d08998292c1d76efed6fac62b2e7b8c11"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e44df3887c89c863b60d8339ad0a55c2e08ae43a8f71755fc12afaab828014e5"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/448916933df4764bb8b5b532c4ec71b3f217742be19e30ca2652475e6129350b"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e97debe9f3cc160ca30db52563d8b45352c7e58720a0b71bad748868e420238b"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b515e49584a696bb1cb10f482708001c394f6eb16724309467c1912b44ffb3ae"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e2b111437d745840b7affa39feed28b2d8c51e1af8c49b90e00d368bf9b749ee"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/add7ca190f8ed0c01bd02d97804f48273cb1d28dbd6dcdfe210f5197abb3d573"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39f5a8e82c628d454db520c6920ec7f0deddf875c0bbd096d71c2d4caf8805fa"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dedc4f37213110809a4a30f872ef579566bc64047c85f69f7008355c87b1b440"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6ba42e8d110f9c4c7d6dc7a5a573013e367bbd1cd2821ef1021606f6da08f44"} {"level":"info","ts":"2026-07-07T15:40:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89e4a4515aa0df82de66e29ea46721fc91ae2ac3cf5e59bdb06feba3e501dcfc"} {"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89026e57850df4a663f6d82ddb6eb24b09cf86e236e82e987fd9c9fd63cab131"} {"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/36706210bc1934cccd9a14803d165f028e32bf7daff8042fa6fd8e4f15240171"} {"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3e33a054b577b723a987c95c60b0d4160bcbf1848f85c159c9c5c97cf059dd2"} {"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/07ef31a0e63acc59563097b33c3a47ea84cc420d38d2a785d7dba9c8bce37f51"} {"level":"info","ts":"2026-07-07T15:40:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6faee9d9945739412412f8f5f1cc58387f8a497d0be31eaa640c09d2e8e5b53c"} {"level":"info","ts":"2026-07-07T15:41:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d501e2c83d3e23d476d4ad54070f5df3ae594817a1e6199d8a9995f4f4425f8"} {"level":"info","ts":"2026-07-07T15:41:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/862092e09b312c05b6f1d1b5e9df582bc18bebb434e172cbd8e8dd2492b4bbc7"}